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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a shared key 
exchanging system with which a shared key can be 
exchanged safely without requiring previous 
cryptographic key generation/exchange for certification 
between respective pieces of communication equipment. 
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SOLUTION: Two pieces of communication equipment for 
performing cryptographic communication encipher a 
disclosed numerical value generated by their own 
disclosed numerical coefficient means 22 through an 
enciphering means 23 while using the disclosed key of a 
managing center and transmit it to the managing center. 
The managing center deciphers this numerical value 
while using its own secret key and after two disclosed 
numerical values of two pieces of communication 
equipment are provided, the deciphered disclosed 
numerical value and a prescribed function enciphered 
while using its own secret key are transmitted to two 
pieces of communication equipment for performing 

cryptographic communication. Every communication equipment performs certification by 
deciphering the received value through a deciphering means 24 while using the disclosed key of 
the managing center, provides a deciphered value, calculates a function (g) from that deciphered 
value and its own disclosed numerical value and further calculates the shared key through a 
shared key calculating means 26 while using a random number. 
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(2) 

1 

[#?Fl1i*©SSH] 

m£*T5«&©a<t3£gK:6ffmu cfte>«&©afli§ 

i5is«»©aft$&a© 9 ■&i*9a«*tf ^ 2 -3©aftis 

•fe > * ©&§3li£fflt ^-CBg^k U x fiia'gffl-fe > f ^31 

mLxmm&mmzm^xmmt-rz zt-cwm.tt7*> 
i^K«^i4S5si©a§ft*gt. s#©B?te& io 

i «cafr3*#?s«*»HM- struma t 

[ii^2] B5fB2o©afi^g©-E-n-en©Bf#3M 20 
^a<t. mm^micm^xmii&m^m^nw-r 

te^a-fe > ^ass-*-** 1 ©at -stfb^a 1 *»6 «t 0 . 
Bfriei+^s«. trials 1 (jy&mm-w* h vm^m t 
mtttmm.m&n^wr' e> ©&m&fi £ #> *e> ts#©afi 
3£g©&&a£StfiiSritf?-!r£Sii 1 ©tw^si . Miam 1 

*«^l§^a£^6fc&c££1f#£ir£li^J5llB 
!6©itWii3^^. 

[«*^3] B5ie i ga-fe>^©^i#a«. mriaH2 
©«#{b^a*> ^(om^mwimt BMvwmmzm^ 

<D®m*m?mm j e. > zowmmzm^x «§mt uxm 
E««i«*ff 5 2 -?©afti!!B'NanrrsiB2 
{ b^a i^&sci £1$® i -r ^ti*^ 1 iatg©^w 

l»3»«4} miBtfffi-te>* tiffiR*>*K it£St©a<i 40 

© i &a-fe>^*n^©ra-cis^©*wii ; 5:^SL. c 
fthmk<D^®&^x*m^x-^<mmm*&]$.-t 

[i»#B5] mis — ?<D±$nm<D£.mt. fjiaaifc© 
ifc^H^-en-entr-y h»©SMfeW&iI*a?SSI§EK:<fc«3ir 
# u xn *> c t znm t f znim 4 1 m,<Dm;m$Hk 

-^fi^ats. f ■< sju-7> • +- ■ ry;- 50 
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2 

mzm 1 ©«#<b#a <t o (otsmmt uzm-ii* ? a v a 

— • -^;Uv> • • TP*)— jt> h • 7'n hn^icj: 
•3 *Wil?:itWr £ C £ £ TifS^Jl 1 1318©* 

[0 00 1 ] 

zmi>x^m*&m?z^mta&t?x.< l cMTz. 

[0 00 2] 

[S6*©is«f5] a{t^g©ra-cM«-ts?R©a<i^^cc 

*. ft««i&*ffc&3era. «Mtafli*tf ^a<t^g©p B i 
■e*a©ii*fflc>s*ser. CT^^-^st^b^© 

D E SBb-^* 5 *)^ ("Data Encryption Standard" , FIPSP 
ubli cation 46, National Institute of Standards and 
TechnolpqyCNIST),1993) . QfflWfe -Sf-fb^^B. 

1 ^tifi$>Z> ("A Method for obtaininq digital siqnatur 
es and publickeycrvptosystems" ,R.L.Rivest,A.Shami 
r.and L.M.Adleman. Communications of the ACM, 21(2) , 
February 1978 ) „ 

[0003] ^mm^^mm 

•ii^tl/^l,^^ (^O^.^^ Diffie-Hellman key agree 
ment protocol ("New directions in cryptography" ,W.D 
iffie and M.E. Hell man, IEEE Transactions on Informa 
tion Theory, IT-22 :644-654 ,1976) ) ififfiff;$inXM 

[0004] ±lB©7'a h n>V (Dlffie-Hellman key a 
greement protocol )"C«. ^H^^Bg-^ad^rtf 5 aft 

%m.r&icm <o &ts c t xmm<DW®*>mm-r z Tnm&v 
[0005] anzffi±?z>tctb. mmmmrnxmsEi 

lT>y7'a (Authenticated Diffie-Hellman key a 

greement protocol )* 5 ^0?>^a"CC»-?> ("Authentication 
andauthenticated key exchanges" .W.Diffe, P. C. Van Oo 
rschot.and M. 3 .Wiener, Designs, Codes and Cryptoqrap 
hy, 2: 107-12 5 ,1992) . CCDT'P FnAtB, 

tf 5 «a©&H±-Cffiffi©fc»©gi**iiuK:4EJ£LT*s 

[o oo 6 ] wm-t>2zm^z>ymxte> mm*>2 



3 

<D1%m%&zm^Z^mm£tt&tat>tix^2> m 
Pa^P2-2 46 640-^<&$a) . co«e**scrt. & 

*©&. — :XE>a««B©tta{C.fc»)*a-fe>*«. * 
©jifl^S if IS 3 n fcjffllKX 4 ©ffiSOBBEtc^H 

&. 10 
[0007]* It, tBSKSEKi&S&tireRfcfffcfiSJt 

©a«««!W«w«©Kas*tf itifK. -astasia 

[0008] 

KfldR3GF^C09«. ea-fe>**««0&l>'C#«a* 
4H»9ft*ff99flmm?&lft-r*:' , 0 r=>;U (Diff 
ie-Hellman key agreement protocol )"Cii. W=-%£^M 20 

©as«. &a(ta*IB©aiE#&i>fc:«>. 

afia^racafitcaoiitf c tfimmtetcib-c&z. 
[ooo9] ±iwgm-k>z zmmLm>yn 

( Di ff i e-Hell man key agreement protocol }IH9\- 

Wr^afiiHttTsiirK^fte^ 

Wtifcffc 6 act»fc». =PJffl14*sjH!tc*>nS 4 <,> *> c i -c 

*©a*«, a=^©8&Bm ©««* e& <• 30 
». BE««**a«:«s:u &afiisgra©fgiE£fr 

[0010] *^«tLh©*tcffi*)i§n/c*>©-e. 
^fifMSMWfcfrSCKfcor. #aa»Bri8ffi©;fc»© 
WlO«M«t« • 4 

So 

[o 0 1 1 ] *fc. #%?&©«&© awi*. fitfc^tcjt 
fc. &aa«BT©Kffi©fc»©aa©wre«£jsR • £ 40 
m&Wittzmm? s c 4 &c & * . 

[0012] 

sHeatsaa-k > *#4»sa©£is*m»BS#»« 
*fT9«»©aa«Btt:E»u c*ie>jggt©afigg 
la-c^wntjsft-ri^waftft^swcteiir. a&© 
aft mm.o) *> ^mnmrn^ify 2 rxommmmt. -e-n 
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mtrzc txwsstztf 5 4;SK:a#ffi£»-sa 1 ©a 

^{b^ai. SA©&H&a4&aaa4ai©aafl: 

^ a<t 0 ©a*a4 K*-^***«*tt»-r 
4*«;t > 'ga-fevfs*. B§-^aft ; &ff-5 2o©a^« 
m^mm$txtcB§n^mo. &M(o®®mim^x 
2 o©a«««ofiH«ffl**n-e*ia^r s*2 ©a 

n©*gfgii*ffl i»r Bg^b u fcBFf 5e©w&£ Bg#a<i «r 
[0013] cct, 2o©aft^g©-€-n-en©aif-^ 

«4. tt«»afc»-3t»-C$S8»a*ttff-r4$»B»a 

ft##f84. &Maatw^a^6©fiHfta«wi'te 
>*©&a«*ffli>r«i#{bo raffle 
ai©«wfc*a4j&»6tto. tt*#iH*. ai©«# 
< t*aa» h ©a^ffi 4 omm&wz-wp h ©anaa 
4*6«#©a«aa©&a»a*aff-r sa 1 <mn 
fat. ai©w»*atcj:»)tw3nfc&Haffl4a 
jHosia»**a*> 6©«5««tf 4 cca-^t»r**««r 
twr 4*watt«#a4 *>6 & 4. 
[ooHiifc. ±nz<Dmm-t>t> ©aa#R». a 
2©a*Mt*«*»6©«#&Haa4 na©ieaa«a 

l»rBfJE©W«*tf*-i-5Htttt»#R4. HFf5£©Sa 
^"gffi-fe > *©«««*J8<,»-c Hi-^b t/t qHwa*ff 

5 2 -3©afffifta^a6iw- 2 ©a#< b* a 4 *» & «c 
s. 

[0015] xmaxte. Bgm&mzn 5 2o©m» 
g«. ga-c^fiXu/c<&gaafii ; S:'&a-te>»©^ii* 
a<,»raaitt/. aaH2>3»«caar4. <ga-fe>*T? 
»icn*a#©iWf«*«r,ra^bL.. 2o©aa« 
g© 2 o©^»gaffl*»fca. a#^raaa 4 e #©«:■ 
aai*at,>ra<wbL/teBfa©H**Bwaa*ff 5 2 
-3©afiag^j£<i-r3. aaaaRtiaaofca^a 
m*>z®'£fflm*&.r>xmMit-?2>ctx'im.&7 i 5 
t&icm^mzmx . *©a#a4S#©^paaffl4ig 

S«tttKl-5**««4if«f4. 

[ 0 0 1 6 ] se^-r. ±gB©^gaafii«. sauna** 

6'^aH2>$'N©^l<i-C{iBg^{b3tv5/c«?). 

c©fgg*»isci«-c*ai>. i ga-fe>^*>e. 
»affi8a^©3sa«:*n,>r«. &naartt«c<na 

S-TSC itcj: D7c©<2;i3affi*mH^A5fSiS'J-r5C 4 

> *«ii-©a=a*aa-fe > > 4§aft^gp^f?a(ifc 
«u i^raaaatcr*) ait-cjasa-ri c tttT^nm 
x&z>. 

[ooi7] tit. mm<Dmffiizwm*>i> mx<D&m 
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[0018] jsfc. *mu* < gm-k>z< l m$i.$>K>. m 

[0019] 

iUfggl 2R£>-§l2©iIfiiSHl 3#>6#J£<*nTt,> 

s„ ga-fe>5? 1 1 ti*s«3an©«^-*tf 9*«-c* 

0. ittl&Sl 2£ilffggl 3«. fg&a@£?T99 

[002 01 02 aiift^g i 2 rj>" i 3 cD—mmom 
m<o7u », >?m*m-t* mmmm 12^13 iz^ti? 

tilsl-ffil&T:. m2K.m?£*><<c. ft«»£*«2 1. 
2»l»tt&m*S2 2. Bg-^{b^©2 3. 1JHHt^&2 

4 . Htt ff ftJI^Jg 2 5 SC««y«H*#S 2 6 «fc 0 J» 

[002 1] SLtt|g^lS2 1 \*UJtk*3Z£.?Z>tc&<D 
<tM®mVfr^fSL2 2tt. SU*!%3=#|g2 

Wf#ft*® 2 3 «. &HStflitff#& 2 2 2p 

6nfci5rtit>$ 1 1 (frskwrnzm^xtsmtrz 
^m-c$>z. mmt^&2 4M. tit>f 1 1 

fxgCC&fflLfcffi^Itfrr^&r&So ^Wiistm# 
©2 5 a. SL»8£*«2 1 £M£xgitf?^&2 5*»6 

»f. g«y=g (x, f (x. y) ) Zffitc? &*>K. 

Mir.. 

[ 0 0 2 2 ] 0 3 «<gJHz > * 1 1 <D-mm<D&m<D7 

uvtrw&yfi-r. <gm*>*\ u*mmtm&3 1. HO 

*fW**«3 2RCW»{t*©3 3*»e>tt4. fg#{b 
#S3 1 t*. 2M"1 3fr*>5-Z.t > i\tc$t.® 

H«fftJI*»3 2tt. «^b#&3 l*»6^it 

5. Bf^b#l33 3«. Rl&f itfit#K3 2*><=>iM.6 
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[002 3] &«C. 0 1 . H2RC/SI3<t*K:*^© 

SQS©j^^©«i^cc-pi,»rsiBj-rs. ae&£flR9J 

x, y=Srffl:©ig&£ir£<!:i*. x*yttxiy 
©Sf£gL£3tT. exp (x, y) {*. xOyi^it, 
ttc. x mode ytt, x CCOt,>T©y -5 
fiJ^^-r. *fc. x XOR ytt. x, y£2itfx 
i*ft[/feit©xiy©i;» h&D9MfeftnttSf[I«3i 
•T. 

[0 024] ( 1 ) Xf?^l 
10 -^©ilft^g 1 2 B. SLIfcl&£#8 2 1 lei OSLSfca 
1 «r^*-r-5. £gfl3«tffif1-#3M82 2 «C©SUfca 1 tC 
»^l»T2M8ttfBa2*l1-JM-S. BS#<b*»2 3t*C 
©&llMMIa2*ea-fe>*l 1 ©^Paa*fflO-CBf# 
{b^rBi^a' ^©Bt^a' £<g3-fe>£ 1 

lKSMiri. H*{C. fe£<Djlffi&Kl 3«. SLifcb 
l*«£0T$SB»fflb2 4t1-*U cnifl-b>$ 

I l©&H!S&Cg-3#Bg#b2' *£Httl,-CgJHz>* 

I I tcmmrz. 

[0 02 5] (2) 
20 < gS-fe>$ 1 ltt. a3©m^fb^lS3 lte.£*)<gm-te 
>fl lOWtfflW, Bf^a2' SbJfb2* £71 

#ftu &m%im&2Rv : b2ZHnLtc'&. cnea 

2Mb 2 CCS-3I,»-CM®! f it**&3 2(,c£*) x= f 
(a 2, b 2) *t>T. WS-fe>* 1 1 

tt. -e©M^t f *B#<b#e3 3 K*Jl>-CiM(W*fflO» 
■CBg^bb. Bf-^x' ?rttgtO-cafi^ai 2RV1 3 

[002 6] (3) 7,7- -j y 3 

mmmm.i 2«. mmt^zi i*>e.^<tbfc±iB©Bg 

30 -Sfx" *02©m^b#ia2 4-C$W. CCTflt> 

>* 1 1 <0SW*fT^. lHr»r. afttti 1 2rt©B8R 
glt##S2 5«, ffl#Sn/cB8»f ©fix (=f (a 
2. b2) ) i. &Mtt{S#W#IS2 2*%OfiH«* 
a2itcl-5K, B8Rs (a 2. x) ^Wth. C 
Ct. ffi^©x, y©ffl{cS+L/. y=g (x, f (x, 
y) ) ttthH^iC. f. g?r^-C*S©-C. g (a 
2. x)=g(a2, f(a2. b2))=b2£^c 
D. aHHSl 3-Cft#$nfc^R«Ib 2*5MRgH- 

40 ^©2 5tcj;off6n^„ ^K. mmesfm^-m25 

tC J: 0 19 6 *ifc£MttfB b 2 £ . aiS^*^lg 2 1 
£3ft/cSLiS[a 1 tKl-lUt. ^^ft©t#K2 6« 

[0 027] [5]«UC. jim^ai 38. flfe>f 1 1 

MRg€rff-^-r€.C£-C. g (b2. x) =g <b2, 
f. (a 2. b2)) =a2£f#T. cn<hrtS|5©SL^ 

^sr^u/caab i £*>6«waK*sm-ri. 

50 [0028] *I%BJCD02 ©H«fe©}f^«:ot,ir 
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[00291 ^1 ©HJ6©^«rtt, ffg-^{h:iS«^<fc 

eas»Difc*6c*s»^, mm-b>* i i s 

mste. mimm i 2 <tim^s 1 3 <Dm<Dtmmm& 
1 1 tcmm? Zo 

(DWS-fe > * 4 3 * - 4 3 „ */HOT C COfe^tt^rfiT $ 

3t«:ffll^r»l©||»<D^S8<!:Biacc, iifiKB4 1 

S-fe>^ 4 3 2 ^ffi^r^WilK2^^T^ 0 20 
[0 03 1] «T\ ±fBiEI««:ur, fl^>^43 

3 -4 3 fl **n^n«*tc«fl9UT«*«K 

3 Kn44«t6. ftacc, cn^t^O 

«**K l^Kn*«t»r«*«K*ff»-r*. CCD^t 

K = K1 XOR K2 XOR . . . XOR K 

[0032] &2omw<oimx\z* nm<Dr^x(om 
be o . iifi^g 4 i <l 4 2 ©m©tw»{i**«S"r * c 30 

[0 03 3] 

4iHaBf^{fc^ai L/TR S ABf#ft*a*fflC»*C £ 
i-T^o «JIHz>*<D&KJ»£ (n, e) . iffiM* 

(n. d) (fctii, IS#Yt*a2 3rC!)W#K. a 
2* = exp (a 2, e) mod niftO, %94t 
^2 4TOSf«, x=exp (x' . e) mod 
ni« e «§{»a3irOlStta2 = ex 

p ( a 2 ' , d ) mod rub2 = exp(b 40 
2* , d) mod ni&0, 3 3 T<D?S 

JJ&ix' =exp (x, d) mod n<t&& 0 

[0 034] &Mtti|-tgt> «*IBMK)T^=f U XA 

fuss©^-* ^ • ^;uv> • • ryy--*> 

r • :/n h njl/ (Diffie-Hellmann key agreement prot 
ocolrJBTF, 8«©^Dh3^il^)4fflW. CCD 

JSrii, 2o(Dr;b3ijXAA7^-^p, 

p - i *r©-r^ros»**fltr*s»fflr*s. c 50 
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<D<h ^H»ffltf»^S2 2 r<D«*H** a 2 = e x 
p(ff.al) mod piM, itJWWf 
*R26r©«l«iK=exp (exp (g. b2) . 
a 1 ) mod p 

[0 03 5] p , g teflWuKMfl^g 1 2 <h»fIJIB 1 

(x. y)Rtfg (x, y)«, fiES0DK»x. y^o 
C>r, y=e (x. f (x, y) ) ^m^M*^ 

CCW, f(x, y) =gr (x, y) =x XO 
R yit^ 

[0 03 6 ] ^CC, C^HJfeWOttfptc^l^rBiWr 
[0 03 7 ] (1) Xr^'l 

^/-*p. tft*«fIMBl 3K3S 

[0 03 8 ] (2) Xf^2 
iim^ai 2tt. ft»«4*a2 lCCJ:»)a»a 1*£ 
JST*. yctC. 4»B*«»ff*S2 2CCj:0i»B«fia 
2^exp (g, al) mod p fc&SCtcfc Off* 
U fIt>^ll(DfiPii(n, e) *flH>TBf#{fc 
3N§g2 3T'Bg-Sf a 2' £exp (a2, e) mod 
nKlJiOSHH/fea. «5H->*1 HCa2' Sr^fHT 

H«K1. fflfi§aBl 3tm»b 
Ib2^exp (g, bl) mod ptt£5£lc<fc?) 
W*U <£m~t>2 1 l©&BB«(n. e) £flH>Tfft 
^b2' £exp (b2. e) mod n&ti:9lt^ 
Ufcfft, ^g-fe>£l 1Kb 2' ^IIT^. 

[0 039 ] (3) X-r>^*3 
fil-b>3r 1 1 » 4 fl-fe>^ 1 1©8S« (n, d) 

tmmt*&3 l&m^x* a 2' Mb2' zmmt 

a2=exp (a2' , d) mod p, b 2 = 
exp (b2' , d) mod n£ft^r£o Cfit 
ia»fitS#&3 2£fflt>T, x = a2 XOR b2 
cMfK>M i©iWfai*ffliiriB 
#<b*«3 3&C<fcDHf-5f{tU x* =exp (x. d) 
modn^rit^L, ^O&WfiSx' £9<ies 1 2 

[0 04 0] (4) Xf^'4 

wmtis* i io>aH«*ffli»ra#{t*a2 4ecj: 

Ov x=exp (x' , e) mod n^tf^L, 1^1 

micmm'k>z 1 lcDisii^tf^. »«c. iiM^si 2 

ItSLL/cxi. ^H»ffla2©li^6. ^firttff 
*S2 5CCj:0a2 XOR x = a2XOR (a2 
XOR b2) =b2^ft@T^o »6tifcb 
2 <t£L2&a 1 ©f»*>6. ft*«H«*S2 6 CC<t 0 e x 
p ( b 2 . a 1 ) mod p = exp (exp (g, 



(6) 



b 1) , a 1) mod p = exp (g, al*b * 
1) mod p=K£iti£LT v *flB«K*»S. 
[0 04 1] -Jj. aiftJia 1 3 feHtttc It, gS-fe 
1 l^fcXfiUfcx" *p6«r&te>£l KD&RJSI 
*fflC>r, «^SWOx=exp (x' , e) 
mod nfcstffU 2 1 KDWR&f 

2<Dmm>s m®LfstYn^mc&*) b 2 xor x = 

b2 XOR (a2 XOR b2)=a2£ftHT 
£ 0 -XIC. f#6ft/ca2<h£L£fcb l©ffi*»6 fc «W«St 10 
SfgtcJ;Dexp (a2, bl) modp=exp 
(exp (g, al), bl) mod p = e x p 
<ff.al*bl) mod p = K*ffffur > Sffl 

[004 2] 

;U : Diffie-Hellmann key agreement protocol) CCfcb^ 

[0 04 3] *aw«:<tti«. gS^>*«CDgi 
^^u/c^^Bf^b^^ffic^r^iiff , iSiE^tf 



1 1 - 1 8 7 0 1 2 
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[0044] igcc, *«wccj:ti«. mmmszzmk 
mis *h-en«c**«**«s#fc«, cneaso 

[BnomtttlM!] 

[ia 1 1 *§m<Dm i ©^jsojbsso^o » ^0-c& 

[02] 0 1 *<D5I{f gg©-p)0^P v £>0-C£>£ o 
[0 3] 0 l tp<D&m-k>$<D—W<D7U * ^0r& 

[04] ^mm<om2<omm<Dmm<o^u^ ?m-c$> 

11, 4 3, -43 n flt>^ 

12, 13, 4K 42 9fi%S 

2 i 

2 2 £ia$:fiittgL^l2 

2 3, 3 3 BB#ffc*® 
2 4,31 

2 5 HftffH-*^S 

2 6 £*r«tfJ|t#S 

3 2 MKfttff^JB 



[01 ] 



[02] 



12 

-4- 



13 
-4- 



21 



12 (13) 
-4 





al 
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-4- 



a2 



23 
-4- 
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0 

L -f J 










b2 


X 
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